GRIMM Cyber

Join us as we talk to Jennifer E. Tisdale, CEO of GRIMM Cyber about the future of car security. Learn about the challenges and innovations in protecting connected vehicles. 🎙️ Listen now: https://lnkd.in/d5rxreGk #CarSecurity #Cybersecurity #ConnectedCars #Podcast #TechTalk

I'm looking forward to this #CISOInsights podcast with some old and new friends in July to discuss #cybersecurity in software-driven vehicles and the #automotive IoT connected infrastructure. Join me, Dan Lohrmann, Earl Duby, and Moe Yassine as we talk about ways to secure the world we live. Register, here: https://lnkd.in/gAhiH8sB

Meet one of the 2024 CyberAuto Challenge trainers! Tim Brom is the Technical Director and Senior Security Researcher for GRIMM Cyber-Physical System's Security team, where he specializes in cybersecurity vulnerability research across diverse sectors including automotive, aerospace, military vehicles, and weapon systems. With over a decade of experience as both a software developer and security researcher, Tim brings a wealth of expertise in embedded systems security to his role. In his career, Tim has focused on automotive, aerospace, critical infrastructure, and industrial control systems, demonstrating his versatility and deep understanding of complex technical environments. He has made significant contributions to GRIMM's toolset, including CanCat, an open-source CAN bus reverse-engineering tool, and CANT, a tool designed for interacting with the CAN bus at the electrical layer. As the lead engineer behind GRIMM's car-hacking workbenches, Tim has established himself as a recognized subject matter expert in the field. His proficiency extends beyond technical development, as he is frequently sought after as a public speaker on topics related to automotive cybersecurity, car-hacking tools, and techniques. Tim's insights have also been disseminated through various articles and papers, notably including his work on Macchina M2.

As you may have heard over the past few days, a vulnerability in the Linux Kernel (the code which actually controls the Hardware) has been discovered (and patched), allowing Local Privilege Escalation. ie. someone with code running as a normal user can obtain control as `root`. It was actually "fixed" in the Linux Kernel code in January, but as of April, several key distributions still had not rolled it out, and it is being actively exploited in the wild. See https://lnkd.in/efdA8Mtf These types of bugs are discovered in all OSes occasionally, and this post isn't about the sky falling or anything like that. There are many other posts which discuss patching/mitigating this vulnerability. Please do. If you are technical, or know (or are in charge of) anyone technical, the person who discovered the bug published an technical write-up here: https://lnkd.in/ebKus3Dk (Proof-Of-Concept code included) This is an incredible write-up, explaining many details about how the kernel and this vulnerability work, and includes bonus details which will make any kernel-exploit-dev happy. This is worth the read. :) cc: GRIMM Cyber

I'm really excited to be speaking at #escarUSA in just a couple weeks. This is repeatedly the best, most technical Automotive Cybersecurity conference I've seen, and I'm honored to be a part of it. See you June 5-6th in Plymouth! cc: escar - The World's Leading Automotive Cyber Security Conference

Check out the hosts of CISO Insights, Earl Duby and Dan Lohrmann as they discuss how to protect local infrastructure in a digital world. With perspectives from Bruce Coffing and Thomas VanNorman, CISSP, GICSP. https://lnkd.in/em_Dx4GD